Success Story
Akua goes from zero to full visibility in its developer portal in 6 weeks: DORA metrics, test coverage and security
At a glance
Akua is a Colombian paytech that provides payments infrastructure as a service for Latin America. Its Port.io developer portal had no connected data sources and no DORA metrics, and vulnerability and observability information was scattered. In 6 weeks, Craftech connected GitLab, New Relic and Wiz to the portal and created automated performance and security scorecards for every service.
Akua is a Colombian paytech that provides payments infrastructure as a service (Acquiring-as-a-Service) for Latin America. Its cloud-native platform holds Visa and Mastercard licenses and can process more than 50 million transactions per day. It operates in Colombia and Uruguay, with plans to expand to Mexico, Brazil and Argentina.
Solution implemented
- Developed 3 exporters with Port.io's Ocean framework (GitLab, New Relic and Wiz), deployed with Helm on Kubernetes
- Designed an entity model with blueprints for repositories, merge requests, pipelines, alerts, assets and findings
- Built a custom integration to ingest GitLab vulnerabilities
- Implemented DORA metrics (deployment frequency and lead time for changes) and performance and security scorecards
- Defined declarative, one-way mappings so as not to interfere with existing entities
Business Challenge
Akua had a developer portal on Port.io that worked, but with no real visibility. There were no exporters or connected data sources, no DORA metrics existed, vulnerability reports were siloed in GitLab, and observability was limited to New Relic, with no integration into the portal. The team needed a unified view to make data-driven decisions.
Solution
Craftech built a centralized observability layer in Port.io that connects GitLab, New Relic and Wiz. It developed 3 exporters with Port.io's Ocean framework, deployed with Helm on Kubernetes, and an entity model with blueprints for repositories, merge requests, pipelines, alerts, assets and findings. It added a custom integration to ingest GitLab vulnerabilities, plus declarative, one-way mappings so as not to interfere with existing entities. On that foundation, it implemented DORA metrics and automated per-service scorecards that measure development cycle performance and vulnerability exposure in real time.
Outcomes
- DORA metrics visible per service in Port, where they did not exist before
- Test coverage available per pipeline, which was not in the portal before
- Observability centralized in Port with associated scorecards, previously limited to New Relic
- Vulnerabilities ingested automatically and reflected in per-service scorecards, previously siloed in GitLab
- Every service with scorecards and automatic updates
Stack & technologies
